Before running this command you may want to check out the manual for the command grep you can do this by typing
man grep at a command line to exit it is q

By running the below command I take no responsibility.

cd /home
grep -r DT_formmail *

Click to expand...

Before running this command you may want to check out the manual for the command grep you can do this by typing
man grep at a command line to exit it is q

Using the grep command above it search within the files looking for DT_formmail we found the problem and got rid of the scripts that used this DT_formmail

It is no good looking for a file called DT_formmail as we found out, but by using grep it look within the files at the coding.

As for this SMTP Tweak, we turn it on to stop out going mail to be sent out from the server so it just queued up in the mail queue, which stopped the spam being sent out, while we was looking for the problem, then I went into the mail queue deleted the spam emails, disable the SMTP Tweak and delivered the emails and that was that.

Note by using the grep command it will take some time depending how many accounts you have for it to search.

C-Panel should be using a secure formmail script to prevent spammers from highjacking a server. Here is one that will do the trick...Anyone at C-panel want to include this script in future distros? It has been well documented that spammers scan servers looking for the open relays that Matt Wright 's scripts and other are a spammers dream.

I just wanted to say thank you for this command. I didn't use it for the same reason everyone else did, but I used it to look for a special script. I had a user sending EBAY SPAM (Trying to get Ebay Users Info). The spammer was using a php script, so it was nearly impossible to know what of the 490 accounts was doing it. I used this command, with the word Support@Ebay.com, and it found that script within 10 minutes. I got the script, the email list ,etc ,etc. Your a life saver!
Thanks
Tim -

Originally posted by silvernetuk Hi,

I had this problem and I did this

cd /home
grep -r DT_formmail *

This should search everything in /home including inside files, if I remember, also while I did this I turned on SMTP Tweak in Tweak Security which queue everything up for out goign email.

This is the command I did I am sure, I did have to look in my history to find the command but 99.9% sure they the commands I did